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Abstract 

In this paper, a novel sensor fault detection, isolation and identification (FDII) strategy is proposed 
by using the multiple model (MM) approach. The scheme is based on multiple hybrid Kalman fil¬ 
ters (HKF) which represents an integration of a nonlinear mathematical model of the system with a 
number of piecewise linear (PWL) models. The proposed fault detection and isolation (FDI) scheme is 
capable of detecting and isolating sensor faults during the entire operational regime of the system by 
interpolating the PWL models using a Bayesian approach. Moreover, the proposed multiple HKF-based 
FDI scheme is extended to identify the magnitude of a sensor fault by using a modified generalized 
likelihood ratio (GLR) method which relies on the healthy operational mode of the system. To illustrate 
the capabilities of our proposed FDII methodology, extensive simulation studies are conducted for a 
nonlinear gas turbine engine. Various single and concurrent sensor fault scenarios are considered to 
demonstrate the effectiveness of our proposed on-line hierarchical multiple HKF-based FDII scheme 
under different flight modes. Finally, our proposed HKF-based FDI approach is compared with various 
filtering methods such as the linear, extended, unscented and cubature Kalman filters (LKF, EKF, UKF 
and CKF, respectively) corresponding to both interacting and non-interacting multiple model (MM) 
based schemes. Our comparative studies confirm the superiority of our proposed HKF method in terms 
of promptness of the fault detection, lower false alarm rates, as well as robustness with respect to the 
engine health parameters degradations. 

I. INTRODUCTION 

An effective fault detection, isolation and identification (FDII) technology can play a crucial 
role in improving the system availability, safety and reliability as well as reducing the mainte¬ 
nance costs and risks of catastrophic failures. Over the past few years, many researchers have 
focused on proposing sophisticated fault detection and isolation (FDI) schemes constituting as 
a significant component of an FDII solution [1] and [2], The general methodology for an FDII 
consists of several important steps including: (a) generation of residuals as indicators of faults, 
(b) isolation of the faulty actuator, or sensor, or component element, and (c) identification and 
estimation of the severity of the fault parameter. 

The FDII approaches can be categorized into three distinct groups including the model- 
based, data-based and hybrid methods [3] and [4], The model-based FDI approaches have been 
introduced in survey papers [1], [2] and [5]—[7] and can be grouped into basic approaches, 
namely (i) Kalman filter and unknown input observer based approaches, (ii) parity relations, 
(iii) optimization-based algorithms, and (iv) parameter estimation and identification techniques. 
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Multiple model approach is a popular structure for FDII. It enables one not only to detect and 
isolate different faults but it also provides one with information on the magnitude of the fault 
and its identification information [8]—[ 13]. 

Since early research on FDII, gas turbines have been one of the challenging application areas 
which have received much attention. The main approach in gas turbines FDII is based on the 
Gas Path Analysis (GPA), which enables one to accomplish the actuator, sensor and component 
diagnosis by observing the engine’s parameters such as the rotor speed, temperature and pressure 
at different stages and the fuel flow rates [14]. Various fault diagnosis techniques have been 
developed for gas turbines based on GPA ranging from Kalman filters [15]—[18], neural networks 
[19], fuzzy logic [20], genetic algorithms [21], sliding mode observer [22], component adaptation 
approach [23] - [24], and hybrid diagnosis [4]. Some of the linear approaches have been extended 
to fully nonlinear models of the engine that have led to nonlinear extensions of the Kalman filters 
to extended Kalman filters (EKF) and unscented Kalman filters (UKF) [12] and [25]. 

In this paper, a modular and a hierarchical non-interacting MM-based approach is proposed 
for both single and concurrent permanent sensors fault detection and isolation in a single spool 
jet engine. In our proposed hierarchical approach, multiple levels of detection filters are used to 
detect and isolate concurrent faults where at each time only one level of the scheme is active 
according to the engine sensors health status. 

We also propose a hybrid Kalman filter (HKF) [17] scheme that consists of a single nonlinear 
on-board engine model (OBEM) augmented with piecewise linear (PWL) models constituting 
as the MM-based estimators to cover the entire engine operating regime. Also, the discrete-time 
derivation of the HKF is formally shown in this paper. Therefore, multiple HKFs are constructed 
to ensure that the FDII algorithm works effectively in a wide range of operating conditions by 
decomposing the engine operating range into sub-regions each represented by a PWL model. 
We then apply a Bayesian approach to generate a general combined model based on the PWL 
models normalized weights. This provides us with a soft transition or interpolation among the 
PWL models. At any given operating point, the combined model represents the nonlinear system 
dynamics with less error than a single PWL model. 

For interpolating the PWL models, various techniques are available in the literature including 
Takagi-Sugeno fuzzy models [26], the functional state approach using discrete representations 
such as automaton for describing the transitions between regions [27], Markov mixtures of 
experts to define the transitions [28], etc. Unlike the functional state approach, the Bayesian 
and fuzzy approaches enable soft transitions among the PWL models as the operating condition 
changes between various points. Moreover, the Bayesian approach uses the statistical method to 
infer the applicable and most appropriate operating regime at each time instant. 

Sensor fault severity identification is another important part of our proposed FDII framework 
which may either be utilized for reconstructing the correct sensor measurements to design an 
output feedback control strategy or to remove the faulty sensor from the measurement set. The 
reconstructed fault-free system outputs are essential for a normal closed-loop system operation 
with a faulty sensor in order to maintain the system stability and set-point tracking under faulty 
situations [29]. Towards this end, we have integrated the generalized likelihood ratio (GLR)- 
based method [30]-[32] with our MM-based scheme to estimate the sensor fault severity under 
various single and concurrent fault scenarios. The MM-based scheme does provide us with the 
time and location of a sensor fault that subsequently simplifies the use of the GLR method 
without requiring to solve an optimization problem for determining the fault detection time as 
part of its fault estimation process. 
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One of the major non-fault related factors leading to false alarms in a given FDI scheme arises 
due to the normal aging effects of the engine components such as compressor fouling, turbine 
erosion and wear or buckling of a component. The above phenomena are associated with gradual 
degradation of the health parameters from their healthy reference baselines, which is a type 
of modeling uncertainty. Different approaches, including the robust generation and evaluation 
methods, are introduced in [33] to improve the robustness of the on-line FDI algorithm with 
respect to modeling uncertainties. In [34], modeling uncertainty is assumed as the structured input 
with known distribution matrix and certain rank conditions in order to design a decoupling filter 
to achieve the robustness. However, in most applications including ours, usually it is challenging 
to model the uncertainty in a structured format. Therefore, robust residual evaluation methods in 
which the adaptive threshold is designed based on the upper bound of the unstructured modeling 
uncertainty that use the historical data have been introduced. Nevertheless, it is required to 
design an individual threshold for each fault type. In addition, in few works such as [4], a 
periodic updating mechanism is used for the on-board engine model in order to enhance the 
robustness and the fault sensitivity. 

In our paper, it is assumed that the reference baselines for the engine health parameters, namely 
the efficiencies and the mass flow rates of the turbine and the compressor, can be estimated after 
a certain number of flights by using an off-line health monitoring module [35] for determining 
the percentages of degradations. The applied method can be utilized off-line in a ground station 
given that the health parameters are degraded more slowly as compared to an abrupt fault. 
Consequently, in order to ensure the reliability of our proposed FDII scheme during the engine 
life cycle, the reference baselines are periodically updated for the OBEM health parameters. 
This procedure will be useful in preventing occurrence of false alarms due to the engine health 
parameters degradations. Despite this updating process, there is always a mismatch between the 
values of the real engine health parameters and the ones that are used in the OBEM due to the 
off-line estimation errors of the health monitoring method. Therefore, we will also investigate 
the robustness of our proposed FDII scheme with respect to various estimation errors through 
performing Monte Carlo simulations. 

To summarize the main contributions of this paper can be stated as follows: 

1) The explicit derivations of the discrete-time HKF scheme is formally provided in Appendix 
A to complement the continuous-time HKF scheme derivations provided in [17]. 

2) A modular and hierarchical non-interacting MM-based HKF structure is developed to detect 
and isolate single and concurrent sensor faults during the entire engine operating regime 
(flight profile) having lower fault detection time and better robustness towards the engine 
health parameters degradations as compared with the other linear and nonlinear filtering 
methods in the literature. Our method is capable of operating during the entire engine life 
cycle through periodically updating the reference baselines of the engine health parameters 
for the nonlinear OBEM. In addition, the computational time of our proposed method is 
lower than the investigated linear and nonlinear methods. 

3) Through performing extensive simulation studies and measuring the mean of residual 
signals, it is shown that the HKF is capable of estimating the engine outputs more 
accurately with less number of operating points and false alarm rates as compared to 
multiple linear Kalman filters (MLKF) based FDI method. 

4) Our proposed MM-based HKF structure is integrated with the GLR scheme to estimate 
the fault severity. This is accomplished by specifically eliminating the estimation of the 
fault detection time which is a necessary step in the standard GLR scheme. 
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5) Our proposed multiple HKF-based FDI scheme is compared with the MM-based schemes 
that utilize various linear and nonlinear filtering approaches such as the linear Kalman filter 
(LKF), extended Kalman filter (EKF), unscented Kalman filter (UKF) and the cubature 
Kalman filter (CKF) in terms of the promptness of the fault detection, false alarm and 
incorrect fault detection rates, robustness with respect to the engine degradations and 
computational time. 

This paper is the extended version of [36] from both theoretical and case-based simulation 
scenarios perspectives. Theoretically, we formally show how the HKF is derived and how 
the previously proposed sensor FDI algorithm in [36] is integrated with the GLR method to 
investigate the sensor fault identification problem. The case study scenarios are also extended 
from the following perspectives, namely (a) different single and concurrent sensor faults are 
considered, (b) the reductions in the fault detection times, lower false alarms and incorrect fault 
detection rates under various parameter uncertainty levels are investigated, and (c) our proposed 
FDI scheme is compared with linear and nonlinear observer-based methods in the literature 
(LKF, EKF, UKF, and CKF) in terms of fault detection time, robustness towards the engine 
health degradations and the computational time. 

The remainder of the paper is organized as follows. Section II provides the design of the 
HKF which includes the OB EM and the PWL models. The interpolation of the PWL models is 
provided in Section III, and Section IV describes the overall hierarchical MM-based FDI scheme 
applicable to both single and concurrent sensor faults. The modified GLR-based approach is 
developed and described in Section V for estimating the severity of a sensor bias fault. A number 
of Monte Carlo simulation scenarios and cases associated with various faults under multiple 
operational conditions are presented. Finally, comparisons with various linear and nonlinear 
filtering methods (LKF, EKF, UKF and CKF) are included in Section VI, and the paper is 
concluded in Section VII. 

II. HYBRID KALMAN FILTER (HKF) DESIGN 

An actual aircraft gas turbine engine, used for deriving the on-board engine model (OBEM), 
and which is used for on-line diagnostic analysis can be described according to the following 
representation: 

X(t) = X c (X(t),H(t),U(t),((t)), 

Y(t) = g c (X(t),H(t))+v(t), (1) 

where X(t) G M n , H(t) G W, Y(t) G W, U(t ) G M p , £(f) G M 2 and v(t) G W denote 
the engine state variables, health parameters, sensor measurements, input signals, and Gaussian 
zero-mean process and measurement noise at time t, respectively. The engine dynamics is also 
an implicit function of the ambient condition parameters including the ambient temperature and 
pressure. The ambient parameters are defined in terms of the environmental parameters including 
the altitude and the Mach number. The engine health parameters in (1) will become degraded 
from their healthy reference baselines during the entire engine life cycle. Moreover, it is assumed 
that the inputs and outputs of an actual engine are discretized with sufficiently small sampling 
period for performing simulation and implementation of our proposed on-line fault detection, 
isolation and identification (FDII) scheme. The discrete-time representation of the variables in 
(1) are denoted by X(k), Y(k), H(k), U(k), ((k) and v(k) with the discrete dynamic functions 
T and Q replacing T c and Q c , respectively. 
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The hybrid Kalman filter (HKF) consists of two main blocks that include a nonlinear on-board 
engine model (OBEM) and multiple piecewise linear (PWL) models derived at different operating 
points to cover the entire engine operating range. The continuous-time fault-free representation 
of the OBEM which can also be derived based on thermodynamics laws is now given as follows: 

AobEM( f) = fc(X OBEM (t), H OBEM (t),U(t)), 

^OBEM (t) = 5 , c(^OBEm(^), H OBEM (t)), (2) 

where Aobem (f) G M” and 1 obem(£) G R 9 denote the OBEM state variables and outputs. Both 
the actual engine and the OBEM operate in parallel under the same flight conditions. Moreover, 
//obem^) G M r denotes the OBEM health parameters that can be represented by H OBEM (t) = 
\ T h(X Q BEM(t)), in which A defines the OBEM health parameters degradation factors (reference 
baselines). This parameter is an all-ones vector for the OBEM that represents a healthy or non- 
degraded engine. It is also assumed that the OBEM health parameters can be periodically updated 
and A is considered as fixed in between the updating intervals. In addition, h(X 0BEM (t)) denotes a 
state-dependent smooth function that corresponds to the compressor and the turbine performance 
maps and is modeled as a polynomial function for our developed gas turbine engine model. The 
updating process for the OBEM health parameters will be described below in detail. Moreover, 
for performing simulation and implementations, the continuous-time OBEM model is assumed 
to be discretized with sufficiently small sampling period. The discrete-time representation of the 
variables in (2) are denoted by X OBEM (k), ^obem(^)> ^obem(^) and U(k) with the discrete 
dynamic functions / and g replacing f c and g c , respectively. 

The continuous-time OBEM model is linearized and discretized at multiple operating points 
(corresponding to engine steady-state values) that are denoted by (A ss .. U SSi , Y ss .) with sufficiently 
small sampling period. The constructed multiple linear discrete-time state-space models is now 
given by: 

A Xi(k + 1) = A\ x ,. t AXi(k) + B\u^AU,(k), 

AY i (k) = C\ x „AX l (k), (3) 

where i e 1,..., L (L is the number of the operating points), A\ Xas ., B\ Uss . and C\ Xss denote the 
state-space matrices associated with the i th operating point, and A Xi(k) = Aobem( k) — X SSi , 
A Yi(k) = Tqbem (k) —Y SSi and A Ui(k) = U(k ) — U SSi . In the Appendix A, the linearization and 
discretization process of the continuous-time OBEM model is described in more detail. In this 
paper, it is assumed that the OBEM linearized models are obtained with the health parameters that 
are set to their healthy reference baselines. Also, the health parameter effects due to changes in 
the engine state variables have been implicitly incorporated into the matrices A and C, although 
the deviations from the healthy reference baselines are not incorporated in the linear models. 

For each linearized model, an off-line linear Kalman filter is designed to estimate both the 
actual engine states and sensor outputs as follows: 

AX t (k+ 1) = A\x.AX,(k) + B\ Uss .AUi(k) + K'JY(k) - £(*)), 

AY,(k) = C\ x , H AXi(k), (4) 

where AXi(k) = X(k) — X SSt , A Yi{k) = Y(k) — Y ss . and A'* s denotes the steady-state Kalman 
filter gain matrix. For the purpose of constructing the multiple model HKFs, the steady-state 
Kalman gain matrices as well as the matrices A|x ss . and C|x sa . that are constructed associated 
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with multiple operating points are stored in a look-up table. According to (4), the linear Kalman 
filter does not take into account the effects of the health parameter degradations from their healthy 
reference baselines since the state-space matrices have already been determined for an all-ones 
A. Consequently, it does not have the required level of robustness for handling a vast number 
of health degradations that occur during the entire engine life cycle. Therefore, it is essential 
to update the health parameter reference baselines of the OBEM to maintain the reliability and 
accuracy of the state estimates and the performance of the FDII scheme through out the entire 
engine life cycle operation. For this purpose, the health parameter reference baselines can be 
estimated by an off-line health monitoring system and then periodically updated in the discrete¬ 
time OBEM model. Therefore, the on-line FDII scheme is integrated with an off-line health 
monitoring system. 

The frequency of the health monitoring system updates is significantly lower than that of 
the on-line FDII algorithm, since the health degradation process is slow and gradual during 
one flight, although their accumulated effects after a number of flights may generate a large 
discrepancy between the OBEM and the actual engine. The off-line health monitoring module 
can either be a single augmented Kalman filter that estimates the health parameters based on 
the collected data during several flights or a nonlinear approximation method such as a neural 
network that receives the engine historical data. It must be noted that both the health monitoring 
and updating mechanism can be performed on-line having a sufficiently large sampling interval. 
However, the health parameter estimation process needs to be terminated whenever a fault occurs 
in the engine to avoid generating incorrect estimates of the health parameters. 

The off-line health monitoring module uses the collected input and the measured output data 
to estimate the health parameter reference baselines, that is A. The estimated A is updated 
periodically in the OBEM model within a determined time interval T that is usually a given 
number of flights or days. The update process feeds A into the OBEM model so that the on¬ 
line FDII scheme can operate within the neighborhood of the degraded actual engine condition. 
Consequently, the OBEM model can now be re-written as follows: 

-A"obem(^ + 1) = f(X OBEM (k), A/i(A 0 bem(^)), U(k )), 

A'obem(^) = 5 , (A"obem(^), A/i(A 7 "obem(^)))- (5) 

It must be noted that the OBEM model that is provided in (2) is used only once for performing 
the linearization process with A set to an all-ones vector, although the OBEM model in (5), with 
its reference baselines periodically updated, is the one that is utilized in our proposed HKF 
structure as well as in our on-line FDII scheme. For sake of notational simplicity, we use the 
same notations for the above two versions of the OBEM model. 

To construct the HKF representation we modify (4) where the steady-state variables are 
replaced by the OBEM states and outputs that are obtained from (5) and also by using the 
previously stored steady-state Kalman filter gain and state-space matrices as follows: 

Xfk + 1) - Aobem {k + 1) = A\ XsH (Xfk) ~ X OBEM (k)) + K l jY(k) - Yfk)), 

Yi(k) = C \ x ss . (A U{k) - Aobem (k)) + Y OBE u(k). (6) 

In the above model the effects of the input and the B matrix are eliminated from the HKF 
formulation given the fact that these have already been accounted for by the OBEM model. The 
procedure for derivation of the discrete-time HKF is formally shown in the Appendix A. 


August 28, 2015 


DRAFT 



7 


Consequently, multiple HKFs are designed by using (6) for multiple operating points. After 
updating the OBEM health parameter reference baselines, there is no longer a need to recalculate 
the A|x ss ., C\x ss and K l ss matrices for each operating point, since the effects of the health 
parameter degradations have been incorporated into the A^obem and Yobem as given by (5). 

One of the factors that can affect the efficiency of our proposed FDII algorithm is the 
estimation error of the off-line health monitoring module, that leads to mismatches between the 
actual engine and the OBEM outputs. Larger estimation errors may increase the fault detection 
time, and lead to occurrence of false alarms and incorrect fault detection rates. The acceptable 
ranges of the estimation errors that do not lead to false alarms and incorrect fault detection 
rates will be specified subsequently in Section VI for different health parameters under various 
healthy and faulty scenarios. Moreover, the reliability of our proposed on-line FDII strategy as a 
function of different mismatching factors between the actual operational engine and the OBEM 
(as represented by the reference baseline estimation errors (RBEE = A ~ A ^ )) and the magnitude 
of the process and measurement noise signals will be investigated subsequently in Section VI 
by means of a confusion matrix analysis. 

In order to develop our proposed HKF-based scheme as an FDII strategy, multiple piecewise 
linear (PWL) models need to be generated for each fault hypothesis at various operating points. 
Moreover, the PWL models will be integrated and fused to cover the entire operational regime 
of an engine. The detail description of this process is provided below. 

III. Piecewise Linear Models (PWL) Interpolation 

Any given linear model of a nonlinear system has a limited operating range in which it remains 
valid. Nevertheless, our ultimate goal is to obtain a globally valid model which is valid for the 
entire operating regime. Therefore, the full operating range is divided into several sub-regions 
where each is defined around an operating point for which a piecewise linear (PWL) model 
can be derived [37]. The PWL models can then be integrated in order to construct a parameter- 
varying general model whose parameters are the PWL models weights that are obtained through 
an on-line Bayesian approach. This will provide one with a soft interpolation among the PWL 
models as opposed to a hard switching among them. In this paper, the engine inputs including 
the fuel flow rate and ambient variables are used to partition the engine operational regime into 
multiple operating points for which the PWL models are constructed. These operating points are 
associated with different flight conditions such as take-off, climbing, cruise and landing modes. 
The selected number of operating points depends on (a) the required HKF state estimation 
accuracy, (b) the FDII strategy reliability on correct decisions, and (c) false alarm rates within 
the range of the applied health parameter degradations. Hence, if there are no concerns on the 
memory utilization, the number of the operating points can be selected to be as high as possible 
to enhance the HKF estimation accuracy and the FDII scheme valid decision rates and also to 
decrease the false alarm rates. 

One of the important advantages of our proposed HKF scheme is in requiring a smaller 
number of operating points as compared to standard linear Kalman filters for covering an entire 
operational regime of the engine. This is facilitated and made possible due to substitutions of 
the steady-state variables in (6) by the OBEM state and output variables. The operating range 
of a PWL model in (4) is only limited to the neighborhood of a corresponding operating point, 
although this can be extended to a larger range in (6) given that X 0 bem and Tobem are changed 
according to the engine operating condition, which enable the PWL model to be valid in a wider 
range. 
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Since, the sensor fault is injected into the actual gas turbine engine and not the OBEM, we 
have for the faulty engine 

X(k + l) = F(X(k),H(k),U(k),C(k)), 

Q 

Y(k) = G{X(k),H{k )) + J2 b s*sS(k - k fs ) + v(k), (7) 

S=1 

where T and Q represent the discrete-time dynamic equations of the actual gas turbine engine, q 
is the number of sensors, b s represents the s th sensor bias fault magnitude and z s represents the 
fault location vector that has a unit value for the s th element while the other elements are set to 
zero, and 5(k — kf s ) denotes a unit step function that occurs at the sample kf s corresponding to 
the s th fault occurrence time. The bias is set to zero for the healthy sensor scenario. Therefore, 
there are a total of q + 1 sensor modes (corresponding to one healthy and q faulty sensor modes). 

The PWL models constructed for multiple operating points are now used to compute the 
corresponding K l ss for various sensor modes of the (7). The matrices A\ Xaa ., C\ Xss . and 7Q S are 
finally stored in a look-up table and are used to construct multiple HKFs (MHKFs) as given by 
( 6 ) for all the sensor modes. Therefore, the HKF for the j th sensor mode at the i th operating 
point is designed as follows: 

X^){k + 1) - Xobem (k + 1) = A\X^\k) - Xobem m + Ki(Y(k) - Y^\k)), 

Y {i ’ j \k) = C\X^\k) - Xobem (k)) + YoBEu(k) + b d ja j 5 j (k), ( 8 ) 

where i = l,L, j = l,... ,(q + l), b d j denotes the pre-determined sensor bias fault that can 
be different from the actual sensor fault b s that is injected into (7), aj denotes the ^-dimensional 
vector and is one of q + 1 modes of a which is the fault parameter vector. For the healthy mode 
or j = 1 , the fault parameter vector, a, is set to a zero vector whereas for j — 2 , ..., q + 1 , aj 
has a unit value for the (j — l) th element and all the other elements are set to zero. Moreover, 
A 1 = A\x ss ., C' = C\x K>i and K l ss are the previously stored state-space and Kalman gain matrices 
that depend on the i th operating point. Therefore, L x (q+1) HKFs are constructed covering the 
entire engine operating range corresponding to different sensor modes. It must be noted that the 
state-space matrices depend only on the operating points but the Kalman gain matrices depend 
on both the operating points and the noise covariance matrices that are the same for all the 
sensor fault modes, given that the OBEM does not take into account the effects of sensor faults. 

Although the operating range of a PWF model in the HKF scheme has been increased as 
compared to that of the one that uses the standard linear Kalman filters by replacing the steady- 
state values with the OBEM variables, still none of the PWF models are solely valid over the 
entire operating range of an engine. Therefore, corresponding to each PWF model one can 
associate a validity function that is based on its normalized weight as obtained by means of the 
Bayes formula. For this purpose, the residual vectors 7 ^ and the covariance matrices SAd) 
that are generated by the multiple HKFs are used to compute the likelihood function for 
the j th sensor mode at the i th operating region as follows: 

7 {i ’ j \k) = Y{k) - Y {i ’ j \k), S {i ’ j \k) = cov( 7 ^(fc)), 

/«>(7«>(A0) = ^—7==^ x expl^(T <ili) (*)) T (5 < « ) (*)) ( - 1) (T <i ’ i) (*;))], (9) 
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where it is assumed that the innovation sequence generated by the hybrid Kalman filter, 7 
is a Gaussian white noise process with zero mean and covariance matrix S^(k) that is calculated 
numerically. The normalized weights for the j th sensor mode are updated recursively by using 
the Bayes formula as follows: 


£f=i f^ j \^ j \k))w^){k-i) 


( 10 ) 


The weights computed above should also remain outside a narrow bound to avoid becoming 
close to zero as: 


if w^\k) > p then w^\k) = w ( ' l,j \k), 

if w^ ,j \k) < p then w^\k) = p, ( 11 ) 


where p is a design parameter that is determined by trial and error and it invokes the PWL 
models that have very small weights and it avoids them from being removed from the set of L 
models. It is also useful for numerical robustness of the recursive weight algorithm [38]. 

Following the computation of the normalized weights, multiple time-varying models are now 
constructed that cover the entire engine operating range subject to various sensor modes. For each 
sensor mode, the corresponding model state-space matrices as well as the weighted innovation 
vector and the covariance matrix are obtained by using the PWL model state-space matrices and 
their associated normalized weights as follows: 

L L 

Ai(k) = J2 w{i,j \k)A\ cm = ^w^ j \k)C\ 

i= 1 i= 1 

L L 

m) = J2 w{i,j) ( k h {i ’ j) ( k )i s c( k ) = ^m j \k)) 2 s {i ’ j \k), (i2) 

i=l i =1 

where A J c (k) and C 3 c (k) denote the weighted state-space matrices of a linear time-varying model 
associated with the j th sensor mode. Also, 7 3 c (k) and S : /.(k) denote the weighted innovation 
vector and the covariance matrix of the j th sensor mode, respectively. The above procedure is 
now designated as the PWL models interpolation. Consequently, (q + 1) weighted innovation 
vectors and covariance matrices that operate through out the entire engine operational regime 
are used in the next two sections to develop our proposed FDII scheme. 


IV. SENSOR FDI VIA MULTIPLE-MODEL-BASED SCHEME 

In this section, the overall structure of our proposed MM-based FDI scheme is presented. 
It is assumed that the fault parameter vector can take on only one of (q + 1) sensor modes 
as a,j. Therefore, at each operating point there are (q + 1) PWL models; one for the healthy 
sensors scenario and q corresponding to various faulty sensor scenarios, that have been designed 
and integrated with only one OBEM for constructing the multiple HKF (MHKF)-based scheme 
as formulated in ( 8 ). The innovation vectors and the covariance matrices that are generated 
by the MHKFs are fused and weighted as given by (12). Finally, there are (q + 1) weighted 
innovation vectors and covariance matrices that are used in the MM-based FDI scheme, where 
they are operating under different healthy and faulty sensor scenarios during the entire engine 
operational regime. 
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Fig. 1: The MM-based FDI scheme based on the HKF corresponding to multiple operating 
regime. 


A. Single Fault Detection and Isolation (FDI) Scheme 

In the MM-based approach [10]—[12], the hypothesis conditional probability P 3 (k) is defined 
as the probability that the fault parameter a assumes the mode a 3 , j = 1 ,..., q+1, conditioned on 
the observed measurement history up to the k th sample, that is: Pj[k) = Pr[a = a 3 \y{k) = 34], 
where y(k) is the random vector measurement history with Y (1), Y( 2),..., Y(k) partitions dis¬ 
playing the available measurements up to the k th sample time. Similarly, 34 is the measurement 
history vector realization that has the partitions of Y\,Y 2 ,... ,Y k . Therefore, the conditional 
probability can be computed recursively as follows: 


Pj(k) 


/y(fc)|q,y(fc-l)(4?| a j; 34-l)-Pj(fc 1) 

EC! /y(*)|«,y(*-i)(*ik, y k -i)Pn(k - 1) ’ 


(13) 


where fY(k)\a,y(k-i)(Yj\ a j,yk-i) denotes the Gaussian density function for the current measure¬ 
ment given by: 


fY(k)\a,y(k-i)(Xj\aj,yk-i) — 


r -l 


(27 t)i / 2 J\si(k) 


xex P[^-(7 i(k)) T (Si(k)Y 1 } (7 i(k))], (14) 


where 7 J c (k) and S J c (k) are given by (12). 

If the j th sensor mode occurs, the probability associated with the j th model will be larger 
than that of the others since its corresponding innovation vector and also the determinant of the 
covariance matrix will be much smaller than those that are predicted by the other filters and 
which are mismatched with the assumed fault scenario. Hence, the condition of the system and 
the location of a single faulty sensor can be detected and isolated based on evaluating Pj(k) and 
determining its maximum value. Consequently, our proposed MM-based approach is capable of 
detecting and isolating sensor faults. Fig. 1 shows the structure of the MM-based FDI scheme 
that employs the MHKFs for the entire engine operational regime. 

Our contribution here is the modification of our previously developed MM-based structure 
in [10] and [11] that utili z es only multiple standard linear Kalman filters and is designed for a 
single operating point into a general strategy that is applicable to the entire engine operational 
regime by means of the multiple HKF scheme and fusion and integration of the corresponding 
innovation vectors and covariance matrices. 

As we will describe in more detail in Section VI, in this paper five sensor faults are considered. 
Therefore, the total number of modes corresponding to each operating point of the jet engine 
is six, where mode #1 (Pi) corresponds to the healthy engine sensors and modes #2 to #6 (P 2 
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TABLE I: Operational modes corresponding to various possible two concurrent sensor faults. 


Level 

Operational Modes 

#1 

#2 

#3 

#4 

#5 

#6 

First 

Healthy 

P2 

P 3 

Pi 

Pe 

Pe 


P2 

P 2 

P2 

P2 

P2 

P2 



P 2 

P 3 

Pi 

Pe 

Pe 


P 3 

P 3 

P 3 

p 3 

P 3 

P 3 



P 2 

P 3 

Pi 

Pe 

Pe 

Second 

Pi 

Pa 

Pa 

Pa 

Pi 

Pa 



P2 

P3 

Pa 

Pe 

P6 


Pe 

Ps 

P5 

P5 

Pe 

Pe 



P2 

p 3 

Pi 

Pe 

Pe 


Pe 

Pe 

p e 

Pe 

Pe 

Pe 



p 2 

p 3 

Pi 

Pe 

Pe 


to P e ) correspond to a 3% sensor bias fault injected into sensors measuring the compressor exit 
temperature (P 2 ) and pressure (P 3 ), shaft rotational speed (P 4 ), the turbine exit temperature (P 5 ) 
and pressure (P 6 ), respectively. 

B. Concurrent Fault Detection and Isolation (FDI) Scheme 

For detection and isolation of two concurrent faults in the gas turbine engine, a hierarchical 
MM approach is proposed in [9] and [11] as shown in TABLE I. In this scheme, it is assumed that 
the engine starts operating with healthy sensors when the first level of filters are active and the 
FDI scheme observes the sensors condition for occurrence of one of the five faulty modes. The 
active bank of filters operate based on the weighted innovation vectors and covariance matrices 
that are obtained in Section III. 

Once the first fault is detected and isolated according to the maximum probability criterion, 
the FDI scheme will activate the second level of the filters as shown in TABLE I for detection 
of the second concurrent faults. In our hierarchical MM scheme, it is assumed that the sensor 
faults do not occur simultaneously and there exists always a minimum time interval between 
the occurrence of two sensor faults that are called concurrent faults. TABLE I indicates all 
the possible configurations for the second bank of filters that are considered in the simulation 
results in Section VI. The first filter in the second level always corresponds to the detected faulty 
mode in the first level. For example, if the first filter detects a 3% bias in the compressor exit 
temperature sensor (P 2 ), then the first and the second filters in the second level respectively 
correspond to P 2 and the possibility of a larger bias fault within the compressor exit temperature 
sensor. Moreover, the third filter corresponds to the concurrent bias faults in the compressor exit 
temperature and pressure sensors (P 2 and P 3 ), the forth filter corresponds to P 2 and P 4 , etc. This 
structure can easily be extended to the third and higher levels that correspond to occurrence of 
multiple concurrent sensor faults. It must be noted that when the new bank of filters is activated 
in the second level, the first bank will be disabled in order to avoid adding any unnecessary 
computational burden. Therefore, at any given time only six filters are operating on-line. 

Remark 1 . In this paper, the value of the pre-determined sensor bias fault severity, b d j as 
given by (8), is considered to be the same for all the filters and only one level of fault severity is 
considered for the hierarchical MM scheme, although various pre-determined sensor bias faults 
can easily be incorporated into our strategy by correspondingly increasing the number of filters 
that are used in this scheme. 
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V. SENSOR FAULT IDENTIFICATION/ESTIMATION 

One of the important requirements of a general control system is the capability to integrate the 
FDI scheme with a fault identification or estimation module in order to estimate the severity of 
a fault that has occurred in different components of the system such as sensors and actuators. In 
this paper, a modified version of the generalized likelihood ratio (GLR) scheme is developed to 
estimate the severity of a sensor bias fault. The GLR was initially proposed by Willsky in [30] 
and was subsequently modified in [31], [32], [39] and [40]. This method is capable of estimating 
the time, location and severity of an occurred fault using a selected threshold. However, in this 
paper the occurrence time and location of a fault have already been determined by means of our 
proposed MHKF-based approach as presented in Section IV. Hence, the fault severity will be 
estimated through the development of a modified version of the GLR scheme. The GLR method 
is a detection-estimation scheme in which the time of a fault is an a priori information input 
to the estimation stage. In this paper, the GLR method is simplified by removing the detection 
process through integrating the GLR method with our proposed MM-based FDI scheme, and 
hence there is no longer a need to select a threshold for our FDII scheme. 

Let us assume that a bias fault has occurred in the s th sensor with the severity b s at the sample 
kf s and it is detected and isolated at the sample Av/.s when the P\{k) mode probability intersects 
with the P( s+ i)(k) mode probability. Also, for k > k ds , P( s+ i)(k) has the highest value among 
the other mode probabilities as shown mathematically by (s + 1) = arg ; max Pj(k). Therefore, 
the effects of the s th sensor fault still remain in the residual of the MHKF that is associated 
with the healthy mode. There are L PWL models corresponding to the healthy mode that will 
be used subsequently to estimate the fault severity as follows: 

X^\k + 1 ) - Xqbem (k + 1) = A\X^\k) - Xobem (k)) + K\ 9 {Y{k) - Y^\k)), 

Y {i ’ 1] (k) = C i (X {i ’ 1 \k) - Aobem(A)) + Vobem(A), (15) 

in which the j th index and b d j in (8) are equal to one and zero, respectively, that are designated 
to the healthy sensor mode. Therefore, the residual vector of the MHKF that is designed for the 
healthy sensor mode at any subsequent time can be expressed as follows: 

7 {l,1) (k) = b s G l s (k, k ds )z s + v(k) for k > k ds , (16) 

where z s is defined in (7) and G'Jk, k ds ) denotes the failure signature matrix that provides one 
with the information on the failure propagation through the filter, and which also depends on 
both k ds and the sample time k at which the set of L innovation vectors are computed for the 
MHKFs associated with the healthy mode. The signature matrices for a sensor bias fault can be 
computed by using the recursive relations for the healthy mode MHKFs as follows [39]: 

(? a {k,k da ) = I-C i A i J i 9 {k-\,k ia ), 

Jl(k, k ds ) = A^Kk - 1, k ds ) + K'Ji’Jk. k^), (17) 

where ./*(£;, k ds ) denotes the signature matrix for the state correction. The signature matrices 
J l s (k,k ds ) and G l s (k,k ds ) are defined separately for the L operating points over a window of 
duration [k ds ,k ds + A/”], where A f denotes the data samples window length. Also, it is assumed 
that J l s (k ds — 1 ,k ds ) = 0. The weighted signature matrices for a detected fault that cover the 
entire operating range of the gas turbine engine can be computed as follows: 
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L 

G s (k,k ds ) = ^ w ^\ k )G l s(k,k ds ), 

i= 1 
L 

Js(k, k ds ) = '^2 w ^ i,1 \k)Ji(k, k ds ), (18) 

i =1 

where w^ l,1 \k) denotes the assigned weight to the i th PWL model that is designed for the 
healthy sensor mode. Therefore, the modified GLR test which consists of a maximum likelihood 
estimation (MLE) of b s when k ds is known is used. For performing the maximization process, 
normally the log likelihood function is chosen as the GLR criterion as follows: 

kds +A/* kds +A/" 

^ = Y 'yf(k)( s l(k)y- 1) 'y 1 c (k) - Y hl(k)^b s G s (k,k ds )z s ] T (Sl(k)) ( - 1) ['yl(k) 

k=kds k=kds 

— b s G s (k, k ds )z s \, (19) 

where 7 l(k) and S' : (k) denote the weighted innovation vector and covariance matrix for the 
healthy sensor mode that are computed from (12). The maximization of the log likelihood 
function is associated with the minimization of the second summation in (19). It can easily be 
shown that the optimal solution to the MLE problem above is the estimated fault b s = —, that 
is the unbiased estimate of b s having the minimum variance as follows: 

k ds +N 

d s — z J Y 

k=kd s 

kds+N 

c s = zj Y Gj(k, k ds )(Sl(k)) < '~ 1) G s (k, k ds )z s . ( 20 ) 

k=kds 

The above procedure can also be employed for estimating the severities of multiple concurrent 
faults that have already been detected and isolated by means of our proposed hierarchical MM- 
based FDI approach. 

Remark 2. In this paper, it is assumed that there is no feedback and information sent from 
the fault identification module to the FDI scheme; otherwise, the FDI scheme needs to have 
a variable structure for updating the pre-determined sensor bias faults based on the estimated 
faults severities. 


VI. SIMULATION RESULTS 

In this section, simulation results and performance evaluation of our proposed sensor FDII 
scheme as applied to several fault scenarios are presented for a nonlinear mathematical model of 
a commercial single spool jet engine previously developed in [12]. This model is generated based 
on the rotor, volume and heat transfer dynamic behavior and is also validated by the commercially 
available standard software GSP 10 [41]. The responses corresponding to our mathematical model 
and the GSP match each other within an acceptable error tolerance (below 5%). For this study, 
our model is extended to the entire flight profile and is simulated in the SIMULINK for use 
as both the actual engine and the OBEM model. The actual engine operates at a given health 
condition subject to the effects of process and measurement noise signals, whereas the OBEM 
health parameters reference baselines are periodically updated to their recently estimated values 
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that are assumed to be generated by an off-line health monitoring module as described in Section 
II. 

Both the actual engine and the OBEM models operate in almost the same ambient conditions. 
The set of nonlinear state-space equations that are used for the engine model are given as follows: 


Pec = ^--- [(c p T c Xm c rnc + gccHum - c p T C cX rhT rh T ) - c v T C c(Xm c rn c + m 

rccc„mcc 

7-RT C c 

- A m T m T )\ + — ( Xm c mc + m - A^wt), 

v r _ VmXm T mTC p (Tcc — Tp) — X dlc rncc p {Tc — T d ) 


Tec = -[( c p TcXm c mc + r/ccH u mi — c p TccXm T mT ) — c v Tcc{Xm c riic + rhf — A^wt)], 

c v m cc 

d RTm^ P x ^ 

Pt = -r— (Ari, T m T + Xrn c me - m n ), (21) 

vm p + i 


where X = \Pcc, N. Tec, / t| ' denotes the state variable vector that includes the combustion 
chamber pressure Pec and temperature Pec, the rotational speed N and the turbine pres¬ 
sure P T . There is a single actuator that supplies the fuel flow (u = rhf) as well as five 
sensors measuring Y = [T c , P c , N,T t , P t ] t , where T c = T d x + ~ ^ and 

P T = Tec 1 — A );t // t [1 — (tpp) 2 ^] denote the compressor and the turbine temperatures, 
respectively. The variables Pq and Pt denote the pressures of the compressor and turbine, 
respectively. Moreover, H = \rjc, rj T , rhe, m T ] T denotes the health parameter vector, where 
r]c and r/T denote the compressor and the turbine efficiencies, and m c and m T denote their 
mass flow rates, respectively. The health parameters are also multiplied by their corresponding 
health parameter degradation factors or the reference baselines A = [X Vc , Xp T , A^, Am T ] T . 
The sensors are affected by the Gaussian measurement noise with the standard deviations of 
SD V = [0.23,0.164,0.051,0.097, 0.164] T corresponding to the percentages of output vector at 
the cruise condition as defined in [12]. More details on other variables and constants in (21) are 
provided in [12]. 

The flight condition is defined by two environmental variables, namely the altitude and the 
Mach number. The ambient temperature and pressure can be computed according to T amb = 
T s — and P amb = P s exp( ~f^^ ), where T s = 288 °K and P s = 1.01325 bar are set to the 
standard condition, R = 8.31447 is the gas constant, g is the gravitational acceleration, and M 
and Alt denote the Mach number and the altitude, respectively. Moreover, the ambient variables 
are affected by the Gaussian process noise with the standard deviations of SD^ = [0.01,0.01] T 
corresponding to the percentages of standard conditions of ambient variables. The noise free 
values of the ambient parameters are applied to the OBEM model. Also, the same control input 
is applied to both the actual engine and the OBEM models. The system is simulated for 520 
sec with the sampling rate of 0.01 sec. The profiles of the altitude, Mach number and the fuel 
flow rate are shown in Fig. 2. 

According to the overall structure of our proposed scheme, as shown in Fig. 1, six PWL 
models are constructed (q = 5) corresponding to each operating point for the five faulty sensor 
modes as well as the one healthy mode with the pre-determined sensor bias faults set to 3% 
of the engine steady-state outputs under the cruise condition. The states and sensor outputs 


August 28, 2015 


DRAFT 



15 





Fig. 2: Profiles of (a) the fuel flow rate, (b) altitude, and (c) the Mach number during a flight 
mission. 


TABLE II: The operating point specifications corresponding to the designed PWL models, where 
rrif and Alt are measured in Kg/m 2 and ft, respectively. 


Models Corresponding 
to Flight Conditions 

rhf 

M 

Alt 

Operating Point 1 (Climbing) 

0.38 

0.2109 

4070.538 

Operating Point 2 (Climbing) 

0.38 

0.6585 

12708.33 

Operating Point 3 (Cruise) 

0.25 

0.85 

16404.2 

Operating Point 4 (Landing) 

0.3 

0.5402 

10424.87 

Operating Point 5 (Landing) 

0.3 

0.1203 

2322.835 


are estimated by means of our proposed MHKFs. Finally, six weighted matrices are calculated 
according to (12) and are applied in the MM-based scheme for detecting and isolating the sensor 
bias faults that occur at different points of the flight profile. 

For our simulations, the measurement and process noise covariance matrices are set to 0.01/ 
and 0.1J, respectively, where / denotes an identity matrix. In this paper, the FDII scheme 
is implemented for the entire flight profile including the climbing, cruise and landing modes. 
Therefore, we assume and consider five operating points handling the entire flight profile (L = 5 ). 
This is the minimum number of the operating points that are obtained for each faulty mode that 
prevents the occurrence of a false alarm in the range of the applied health degradations. The 
number of the operating points depends on the dynamics of the engine as well as the range of 
the applied fuel flow rate and the environmental parameters. We simulated our proposed FDII 
scheme with different number of operating points and also derived a confusion matrix for each 
case in order to analyze the false alarm rates and to decide on the minimum required number of 
the operating points that does not lead to any false alarms for the injected health degradations. 
These details are not included here due to space limitations. 

TABLE II shows the corresponding fuel flow rates as well as the flight conditions corre¬ 
sponding to all the applied PWL models that are designed for each sensor mode. In order to 
efficiently track the variations of the system input during the climbing and landing conditions, 
two operating points are selected for each of these two modes; whereas only one operating point 
is selected for the cruise condition given the presence of a constant input. 

During the fault detection and isolation process, a mode probability // (k) is generated for 
each weighted model using (13) and by determining the maximum Pj(k), j — 1,..., q + 1, the 
sensor fault is detected and isolated. 
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TABLE III: Fault detection time (FDT) corresponding to the maximum tolerable percentage of 
the RBEE (AA) at different stages of the flight profile. 


Faulty Scenario 

Maximum Tolerable RBEE% 

Sensor FDT (sec) 

k f = 50 

k f = 250 

k f = 450 

Fault on !} • 

Compressor 

AA^q 

= 2.52 

AA nc 

= 2.52 

3.7 

4.1 

6.3 


Turbine 

AA^-p 

= 2.52 

AX Vt 

= 1.51 

3.5 

5.1 

5.9 

Fault on Pc 

Compressor 

AAyj^ 

= 1.01 

AX VC 

= 1.01 

7.8 

5.9 

8 


Turbine 

AA^ t 

= 1.01 

ax vt 

= 0.30 

3.4 

2.7 

2.5 

Fault on N 

Compressor 


= 1.21 

AX VC 

= 2.02 

6.5 

2.6 

3.5 


Turbine 

AA^f^ 

= 1.01 

AX Vt 

= 0.81 

6.5 

2.5 

2.9 

Fault on /y 

Compressor 

AA rhc 

= 0.2 

AA,j c 

= 0.2 

7.8 

3 

4.7 


Turbine 

AAt77, t 

= 0.1 

AX Vt 

= 0.1 

6 

2.2 

2.3 

Fault on Ip 

Compressor 

AA rii c 

= 0.3 

AX VC 

= 0.3 

7 

2.6 

3.4 


Turbine 

AAt77, t 

= 0.3 

AX Vt 

= 0.1 

8 

2.2 

2.2 


As described in Section I, the health parameter degradations due to the engine aging is one 
of the non-fault related factors that should be considered for a reliable and an accurate FDII 
strategy. Therefore, the performance of the FDII strategy is evaluated in presence of compressor 
or turbine health parameters degradations from their healthy reference baselines. Generally, there 
is a difference between the actual and the estimated health parameter reference baselines due to 
off-line health monitoring estimation errors and also due to effects of noise and disturbances. 
Therefore, the robustness of our proposed FDII scheme will also be evaluated subsequently in 
this section with respect to the percentage of the reference baselines estimation errors. 

A. Case 1: False Alarms Evaluation 

Many factors such as (i) the dynamic mismatch between the OBEM model and the actual 
engine model, (ii) the large estimation errors for an off-line health monitoring module, and 
(iii) the process and measurement noise, may lead to false alarm flags. In order to evaluate the 
reliability and the efficiency of our proposed FDII scheme in terms of avoiding false alarms, our 
proposed scheme is simulated over the entire flight profile as shown in Fig. 2. The estimated 
reference baselines (A) may differ form the actual degraded engine (A) and this can play a 
source of uncertainty in our FDII scheme in addition to the process and measurement noise. It 
should be noted that the dynamic mismatch between the actual engine and the OBEM models 
is also another source of uncertainty, but this is not investigated in this paper. Therefore, the 
robustness of the FDII scheme against the percentage of the reference baselines estimation error 
RBEE (RBEE% = 100 x AA, where AA = |A — A| and A e [0,1]) is investigated in this section. 

Based on our simulation studies for the healthy sensors scenario, the FDII algorithm is robust 
to the maximum percentage of reference baselines estimation error of 3% for the compressor 
health parameters and a maximum of 2% for the turbine health parameters. Our proposed FDII 
algorithm has declared no false alarms in the range of the above RBEEs, however the possibility 
of false alarms will increase if the RBEEs are increased beyond these upper limits. In case that 
one is within these limits, the mode probability of the healthy sensors is near one whereas the 
other probabilities corresponding to the faulty sensor scenarios are all almost zero during the 
entire flight profile. The values for the probabilities depend on the design parameter p. In general 
the MM-based FDI is independent of p as long as it is selected as sufficiently small. 
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Time (Sec) Time (Sec) Time (Sec) 

(a) (b) (c) 


Fig. 3: Mode probabilities for 3% bias fault applied at (a) kf = 50 sec to the T c sensor, (b) 
kf — 250 sec to the Pc sensor, and (c) kf — 450 sec to the N sensor in presence of the obtained 
maximum tolerable percentage of the estimation errors in TABLE III for the compressor health 
parameter reference baselines. 


B. Case 2: A 3% Sensor Bias Fault Detection and Isolation 

In this section, the performance of the sensor FDI scheme with respect to the fault detection 
time and the robustness of the algorithm with respect to the percentage of reference baselines 
estimation error (RBEE) are evaluated. This evaluation is performed during the entire flight 
profile which lasts for 520 sec, when a pre-determined bias fault with the severity of 3% of the 
engine steady-state output values under cruise condition occurs for a single sensor. TABLE III 
shows the fault detection times for each single sensor fault scenario at different stages of the flight 
profile including the climbing, cruise and landing modes. It also shows the maximum tolerable 
percentages of the RBEE of engine health parameters that is denoted by AA. It is assumed that 
A = 0.99. The limits are obtained through preserving two performance requirements for our 
proposed FDI scheme, namely: 1) the sensor fault detection time (FDT) should be less than 8 
sec, and 2) no false alarms should be generated. This implies that our proposed FDI scheme can 
tolerate the reference baselines estimation error as long as the above performance requirements 
are fulfilled. 

In addition, Fig. 3 depicts the mode probabilities for three selected fault scenarios when the 
bias fault occurs at different instants of the flight profile. The value of the injected fault is set 
to 3% of the engine steady-state output values, while the percentage of the estimation errors for 
the compressor health parameters reference baselines (RBEE) are set at their maximum tolerable 
levels that are indicated in TABLE III. 

By comparing the results in TABLE III, it can be concluded that the sensor fault detection 
times during the cruise mode are much less than that of the other flight modes since there is 
less variation of thrust and ambient conditions. In spite of a large input and ambient condition 
variations during the climbing and the landing modes, it is still possible to detect a sensor fault 
by applying our proposed FDI scheme. In order to show this capability, the sensor faults occur at 
kf = 50 sec during the climbing mode, at kf = 250 sec during the cruise mode and at kf = 450 
sec during the landing mode. The fault detection times are all indicated in TABLE III for various 
fault scenarios. 

To quantify the effectiveness and reliability of our proposed FDI scheme in presence of the 
mismatch between the OBEM model and the actual engine, confusion matrices are obtained for 
both the healthy and the faulty scenarios subject to different health parameter degradations and 
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TABLE IV: The confusion matrix for 3% RBEE of the compressor health parameters. 



Tc 

Pc 

N 

T t 

Pt 

No Fault 

T c 

50 

0 

0 

0 

0 

0 

Pc 

1 

49 

0 

0 

0 

0 

N 

0 

0 

50 

0 

0 

0 

T t 

12 

0 

0 

27 

10 

1 

Pt 

17 

0 

0 

0 

29 

4 

No Fault 

0 

0 

0 

0 

0 

50 


TABLE V: The confusion matrix for 3% RBEE of the turbine health parameters. 



Tc 

Pc 

N 

Tt 

Pt 

No Fault 

T c 

50 

0 

0 

0 

0 

0 

Pc 

0 

50 

0 

0 

0 

0 

N 

1 

0 

48 

0 

0 

1 

T t 

2 

0 

0 

41 

0 

7 

Pt 

0 

1 

0 

0 

44 

5 

No Fault 

0 

1 

0 

0 

0 

49 


measurement noise. The rows in the confusion matrix are the fault conditions and the columns 
are the actual isolated faults. The element in the i th row and j th column (CM,/ shows the rate 
that fault j is isolated when fault i occurs. Ideally, the confusion matrix should be a purely 
diagonal matrix. To obtain the confusion matrix for our sensor FDI scheme, 50 Monte Carlo 
simulations are performed in which the percentage of the RBEE exceeds the maximum tolerable 
limit that is reported in TABLE III. Tables IV and V show the confusion matrices for the healthy 
and 3% faulty scenarios as applied to the gas turbine engine sensors during the cruise mode 
subjected to 3% RBEE of both the compressor and the turbine health parameters, respectively. 

In addition to the percentage of the RBEE, the measurement noise is another factor that 
can affect the performance of our proposed FDI scheme. Consequently, TABLE VI depicts the 
confusion matrix that is obtained for investigating the effects of measurement noise signals, 
when their original standard deviations ( SD V ) are multiplied by a factor of 20. 

According to our simulations, the initial impact of any increase in either the standard deviation 
of the noise measurements or the percentage of the RBEE is to delay the fault detection time. 
Moreover, the occurrence of false alarms and incorrect fault detections are the other consequences 
due to increases in the above uncertainty sources. Different performance indices can be defined 
to quantify the robustness of our proposed sensor FDI algorithm with respect to the levels of 
uncertainty sources [42], namely: 


FPR = 


Eli cm 6j 
E- = 1 cm 6 / 


ACC = 


Ell CM, 


EL Eli cm,/ 


IFDR = 


Ej=i Ei=i CM ij(i / j) ^2) 


Eli Eli cm 




where FPR, ACC and IFDR denote the false positive (false alarm) rate, accuracy and incorrect 
fault detection rate, respectively, that are calculated in TABLE VII to investigate the effects of 
various uncertainty sources. 

According to TABLE VII, increasing the levels of the uncertainty sources results in decrease 
of ACC, but increase in FPR and IFDR. Notwithstanding these observations, our proposed sensor 
FDI scheme still works sufficiently robust against a high level of measurement noise as well 
as discrepancies between the OB EM model and the actual engine health parameters reference 
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TABLE VI: The confusion matrix for the measurement noise signals where the SDs are multiplied 
by a factor of 20. 



T c 

Pc 

N 

T t 

Pt 

No Fault 

T c 

48 

0 

0 

0 

0 

2 

Pc 

0 

46 

0 

0 

0 

4 

N 

0 

0 

49 

0 

0 

1 

T t 

0 

0 

0 

48 

0 

2 

Pt 

0 

0 

0 

1 

47 

2 

No Fault 

0 

0 

0 

0 

1 

49 


TABLE VIE Sensor FDI algorithm performance indices corresponding to different levels of 
uncertainties. 


Scenarios 

FPR 

ACC 

IFDR 

3% Compressor RBEE 

0 

0.85 

0.16 

4% Compressor RBEE 

0.12 

0.66 

0.376 

3% Turbine RBEE 

0.02 

0.94 

0.016 

4% Turbine RBEE 

0.04 

0.91 

0.076 

Noise SDx20 

0.02 

0.956 

0.0004 

Noise SDx25 

0.02 

0.91 

0.012 


baselines. 

C. Case 3: Sensor Fault Detection and Isolation for Different Fault Severities 

In real applications, there is no guarantee that the sensor bias fault severity always matches 
the 3% pre-determined fault for which the MM structure is designed. Therefore, it is essential 
to investigate the performance of our proposed MM-based FDI scheme for an applied sensor 
bias fault having different severities starting from the minimum detectable bias. TABLE VIII 
shows the average detection times for all the faulty modes as a function of the fault severities, 
when the applied faults occur at different stages of the flight profile with also the maximum 
tolerable RBEE% for the compressor health parameters that are indicated in TABLE III. It can be 
observed from TABLE VIII that the higher the fault severity with respect to the pre-determined 
3% fault, the later the detection time, given that the actual fault becomes further different from 
the pre-determined bias fault. Note that the minimum detectable sensor bias fault is 2% that 
requires larger time to be detected as compared to the higher fault severities, especially during 
the climbing and landing flight modes. 

It should be pointed out that our proposed MM-based structure is designed for a 3% sensor 
bias fault and is not capable of detecting and isolating sensor bias faults that have far greater 


TABLE VIII: The average sensor fault detection times for all fault modes as a function of the 
fault severity at different stages of the flight profile, under the maximum tolerable RBEE% for 
the compressor health parameters. 


Fault Time 

2% 

3% 

4% 

5% 

6% 

kf = 50 sec 

14.18 

6.56 

6.74 

7.42 

8.6 

kf = 250 sec 

8.34 

3.64 

3.98 

4.76 

5.7 

kf = 450 sec 

17.66 

5.18 

5.32 

6.66 

7.52 
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TABLE IX: The average of the maximum detectable sensor bias fault (as percentage of the 
engine steady-state outputs) over the entire flight profile by using our FDI scheme when the 
corresponding maximum tolerable RBEE% reported in TABLE III are applied to the compressor 
and turbine health parameters. 


Fault Modes 

Max. Tolerable 
Compressor RBEE% 

Max. Tolerable 
Turbine RBEE% 

T C 

25% 

70% 

Pc 

20% 

50% 

N 

12% 

100% 

T t 

10% 

14% 

Pt 

70% 

75% 


severities. For this purpose, TABLE IX shows the maximum detectable sensor bias faults by 
using our proposed FDI scheme by also considering the maximum tolerable RBEE% for the 
compressor and the turbine health parameters. The reported detectable fault severities in TABLE 
IX correspond to the average fault severities for all the flight modes. However, if an applied sensor 
bias fault increases beyond the corresponding maximum detectable fault as indicated in TABLE 
IX, an incorrect fault may be detected. Therefore, it is recommended that one incorporates more 
models within the MM-based structure corresponding to higher pre-determined sensor faults to 
become capable of detecting and isolating faults with higher magnitudes in shorter durations of 
time. 

D. Case 4: Sensor Fault Severity Identification 

One of the advantages of our proposed MM-based FDI scheme is its capability in providing 
information on the occurred fault severity. However, this method is not precise for fault severity 
estimation, since it provides one with only information on the level of an occurred fault instead of 
the exact fault severity. Therefore, the modified GLR method introduced in Section V is integrated 
with our MM-based FDI scheme to estimate the sensor bias fault magnitude and severity. In 
order to investigate the performance of our proposed fault severity estimation method, the notion 
of the percentage of weighted mean square normalized residual errors (WMSNE) are obtained 
for various detected fault scenarios as follows: 


WMSNE% = 



i =1 


v~^/C 




E k 

k = kds 


W^’ s+1 l(k) 


x 100, 


Y^ s+1 \k) = C\X^ s+1 \k) - XoBEu(k)) + Y OBEM (k) + b s z s S(k - k ds ), s = l,...,q (23) 

where K, is the total simulation samples and Y- us+}) {k) is the numerically constructed output 
associated with the (s + l) th operational mode corresponding to the s th fault, in which the fault 
vector effect is generated based on the estimated fault magnitude b s and the fault occurrence 
detected time k ds - It must be noted that there is no feedback and information sent from the fault 
estimation module to the filters for updating their pre-determined bias faults. TABLE X shows 
the average percentage of the WMSNE that is measured for different stages of the flight profile 
as a function of the bias fault severity as applied to various sensors. 
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TABLE X: The average WMSNE% for all flight modes as a function of the bias fault severity 
applied to various sensors without considering any estimation error for the health parameter 
reference baselines. 


Fault 

2% 

3% 

4% 

5% 

6% 

Tc 

0.0085 

0.0067 

0.0073 

0.0124 

0.0195 

Pc. 

0.1360 

0.1106 

0.1293 

0.1689 

0.2537 

N 

0.0111 

0.0109 

0.0107 

0.0105 

0.0104 

T t 

0.0137 

0.0066 

0.0128 

0.0312 

0.0944 

Pt 

0.1313 

0.1269 

0.1359 

0.1503 

0.1615 


According to TABLE X, the average percentage of WMSNE is less than 0.5% for various 
faults that are limited within the operational range of our FDI scheme as was defined in the 
preceding case. It can also be observed that the percentage of the WMSNE is lower for the 
cruise flight mode as compared to the climbing and landing modes due to the high variations of 
the engine thrust. 

E. Case 5: Concurrent Fault Detection, Isolation and Identification 

In previous simulations only a single sensor fault is applied to the gas turbine engine. In this 
case study, our proposed FDII scheme is used for concurrent fault scenarios that occur at different 
stages of the flight profile. For this purpose, the hierarchical scheme described in Section IV-B 
is used to diagnose the concurrent sensor faults. The fault detection times and the percentages 
of the WMSNE as given by (23) are obtained for two selected scenarios with concurrent sensor 
faults. The first scenario simulates the effects of a 6% bias fault applied to the T c sensor at 
kf = 50 sec during the climbing mode and the concurrent 5% bias fault applied to the N sensor 
at kf — 250 sec during the cruise mode. The estimated concurrent faults are depicted in Fig. 4. 

The concurrent faults for the first scenario are detected and isolated after 1.7 and 2.4 sec¬ 
onds, respectively from their occurrence instants, whereas the percentages of the WMSNEs 
are 0.0208% and 0.106%, respectively. The second scenario simulates the effects of a 4% 
bias fault that is applied to the T t sensor at kf = 250 sec during the cruise mode and the 
concurrent 6% bias fault that is applied to the Pp sensor at kf — 450 sec during the landing 
mode. The concurrent faults for the second scenario are detected and isolated after 0.9 and 0.4 
seconds, respectively from their occurrence instants, whereas the percentages of the WMSNEs 
are 0.0125% and 0.1702%, respectively. 

F. Case 6: Comparison 

In this section, the efficiency of our proposed MM-based sensor FDI scheme which utili z es 
the MHKF as a detection filter is compared with different filtering methods including the linear 
Kalman filter (LKF), extended Kalman filter (EKF), unscented Kalman filter (UKF), and the 
cubature Kalman filter (CKF) [43]. It must be noted that in the following conducted experiments, 
multiple combined residual vectors and covariance matrices associated with multiple operating 
points are computed for both the HKF and LKF filtering methods to construct the multiple 
HKF (MHKF) and multiple LKF (MLKF)-based FDI schemes, respectively. Moreover, our MM- 
based FDI scheme is compared with the interacting multiple model (IMM) approach [44], [45]. 
Different experiments are conducted in this section to compare the promptness of the fault 


August 28, 2015 


DRAFT 




22 


3 

TO 

LL 

CO 

TO 

CO 


o 


O 

(/) 

c 

o 

(/> 


3 

TO 

LL 

<0 

TO 

CD 


O 

(/) 

c 

<u 

t/> 


40 

20 

0 

-20 

I 

600 

400 

200 

0 

-200 





F 






1 











■ ■ ■ 

Estimate* 
Real Faul 

i Fault 
t 









100 200 300 400 

Time (sec) 

(a) 


500 


600 






- . -L- 












■ ■ ■ 

Estimate 

d Fault 







— Real Fault 














100 200 300 400 

Time (sec) 

(b) 


500 


600 


Fig. 4: Estimated two concurrent sensor fault severities (a) a 6% bias fault that is applied to the 
T c sensor at kf — 50 sec, and (b) a 5% bias fault that is applied to the N sensor at kf — 250 
sec without considering any health parameter degradations. 


detection and isolation scheme as well as the degree of robustness towards the health parameters 
degradations among the above filtering methods. In all the experiments, similar process and 
measurement noise signals are applied to the gas turbine engine and similar noise covariance 
matrices are used to construct the above filters. The sampling rates for simulating the actual 
engine and the nonlinear filtering approaches are 0.01 sec and 0.1 sec, respectively. Also, 2n +1 
sigma points, where n is the dimension of the state variable vector, are generated in the UKF 
method with the tuning parameters a = 10 -3 , (3 = 2 and n = 0. For the CKF method, 2 n 
cubature points are generated through intersecting the unit sphere with the Cartesian axes and 
are then scaled by y/n. Due to space limitations, the details regarding the formulations of the 
above applied filtering methods are not included as they can be found in the literature. 

Experiment 1: The 3% single bias fault is applied to different sensors at kf — 250 sec during 
the cruise mode with no health parameter degradations. All the filters are capable of detecting 
and isolating the injected fault correctly with different fault detection times. The sensor FDTs 
are shown in TABFE XII for the detection filters that are utilized in the MM-based FDI scheme. 
It can be concluded from TABFE XII that our proposed approach is capable of detecting and 
isolating the sensor faults faster than other methods, particularly the MFKF method, given that the 
OB EM can capture the nonlinear behaviour of the engine more effectively than others. Although, 
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Time (Sec) Time(Sec) 

(d) (e) 

Fig. 5: Mode probabilities for a 3% bias fault that is applied at kf — 250 sec to the T c sensor 
by applying multiple (a) HKF, (b) LKF, (c) EKF, (d) UKF and (e) CKF based FDI approaches 
with 2.5% degradations applied to the compressor health parameters of the actual engine. 

TABLE XI: Absolute mean of residual signals associated with various types of nonlinear filters 
corresponding to the healthy mode in the MM-based scheme for the healthy engine sensors 
without health degradation. 


Sensor 

Absolute Mean of Residual Signal 

MHKF 

EKF 

UKF 

CKF 

T c 

8.8329 x 10" 4 

0.00063 

0.0058 

0.0039 

Pc 

0.0044 

0.0186 

0.0127 

0.0105 

N 

4.0454 x 10" 4 

0.0032 

0.0011 

0.0009 

T x 

8.1498 x 10" 4 

0.0081 

0.0085 

0.0069 

Ft 

0.0014 

0.0028 

0.0082 

0.0074 


the EKF, UKF, and CKF are well-known nonlinear filtering methods, however they detect and 
isolate the injected sensor faults with more delay than our proposed method. According to our 
observations that are included in TABLE XI, the HKF has smaller estimation error as compared 
to the EKF, UKF, and CKF, which leads to faster FDI performance. It is also expected that 
in case the OBEM is subjected to certain unmodeled dynamics with respect to a real engine, 
the FDTs that are obtained with multiple EKF, UKF, and CKF based FDI schemes are more 
comparable with our proposed MHKF-based FDI scheme. 

Experiment 2: The robustness of our developed MHKF-based FDI approach is compared 
with the other filtering methods here. The 3% bias fault is applied to the T c sensor at kf = 250 
sec during the cruise mode with 2.5% degradations that are applied to the compressor health 
parameters. In this experiment, it is assumed that the OBEM health parameters are not updated 
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and the 2.5% degradation is only applied to the compressor health parameters of the actual engine. 
Therefore, the reference baselines associated with the compressor health parameters are one for 
both the OBEM model and the nonlinear model that is used for deriving the other nonlinear 
filtering methods. The mode probabilities that are generated in this scenario are depicted in Fig. 
5. It can be concluded that our method outperforms the other approaches in terms of robustness 
with respect to the health parameters degradations. It is also shown in Fig. 5 that the applied 
fault can be detected by using the EKF and MFKF methods in addition to our method, but false 
alarms are generated by these methods before the occurrence of the fault. 

Experiment 3: Our proposed MHKF method is similar to the EKF in the sense of the 
linearization process at certain operating points instead of the entire flight profile. Therefore, 
one may expect that the EKF method can yield similar results to that of the MHKF method in 
case the health parameters are also updated for the nonlinear engine model used for deriving 
the EKF. In this experiment, the same engine model where its health parameters are updated is 
used for the MM-based structures that utilize the MHKF and EKF schemes. The 3% bias fault is 
applied to the T c sensor at kj = 250 sec during the cruise mode with A = 0.99 and A = 0.975. 
The estimated health parameters are updated similarly for both the EKF and MHKF schemes. 
Fig. 6 shows the mode probabilities that are generated in this scenario. According to Fig. 6, the 
EKF is also capable of correctly detecting and isolating the applied fault by using the health 
parameters updating mechanism. However, the fault detection time and the computational time 
of the EKF is far greater than that of the MHKF. The MM-based FDI method is capable of 
detecting and isolating the applied fault in 2.7 sec and 20.8 sec by using the MHKF and EKF 
methods, respectively. The same results are also obtained for the other fault scenarios, but are 
not included here due to the space limitations. 

Experiment 4: In this experiment, the performance of the FDI algorithm that utilizes our 
proposed MHKF as well as the other filtering methods are compared in the interacting multiple 
model (IMM) structure. For the IMM-based FDI structure, the sensor FDTs are computed for 
the 3% single bias fault that is applied to the sensors with no health parameter degradations 
as represented in the TABFE XIII. According to the simulation results, the fault is detected 
sooner by using the IMM structure that utilizes all the detection filters except the MHKF. It 
appears that the interactions among the multiple models do not improve the MHKF-based FDI 
scheme performance. For simulating the IMM scheme which utilizes our proposed MHKF, the 
off-diagonal elements of the transition probability matrix should be selected less than 0.001; 
otherwise, the probability of the healthy mode monotonically decreases to reach almost 0.8 
before the occurrence of a sensor fault which can enhance the risk of a false alarm. Therefore, 
it is not recommended to use the IMM scheme for the MHKF method. 

Experiment 5: In this experiment, the computational time of all the above filtering methods 
are obtained and compared with our proposed MHKF approach in TABFE XIV. This comparison 
confirms the advantages of implementing the MHKF approach in real-time applications. The 
computational time is measured for only the filters corresponding to the healthy mode by the 
use of “tic-toc ” command in Matlab. It must be noted that the computational time of the MHKF 
includes the time for not only simulating the healthy mode but also for running the OBEM 
model. Therefore, based on the information provided in TABFE XIV, the MHKF scheme is 
faster and more suitable than the other filtering methods to be utilized during the entire flight 


August 28, 2015 


DRAFT 



25 


TABLE XII: Sensor fault detection times using multiple non-interacting HKF, LKF, EKF, UKF 
and CKF based FDI approaches without considering health parameter degradation. 


MM-Based 

Fault Detection Time (FDT) (sec) 

FDI Approach 

T C 

Pc 

N 

T t 

P T 

HKF 

0.2 

0.2 

0.2 

0.2 

0.3 

LKF 

8.3 

38.2 

16.9 

12.1 

12.4 

EKF 

1 

1 

0.9 

0.8 

0.9 

UKF 

0.6 

0.7 

0.6 

0.7 

2.7 

CKF 

0.6 

0.6 

0.7 

0.7 

2.3 
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Fig. 6: Mode probabilities for a 3% bias fault applied at kf = 250 sec to the T c sensor using 
(a) the MHKF and (b) the EKF-based FDI methods, with A = 0.99 and A = 0.975. 


profile. Computing the Jacobian functions in each time step for the EKF method and also the 
cubature and sigma points with their corresponding mean and covariance weight matrices for 
the CKF and UKF methods, respectively are time consuming operations that lead to the higher 
computational time compared to our proposed MHKF scheme. Moreover, the MFKF approach 
computes the Kalman gain matrices on-line, whereas the MHKF utilizes the previously stored 
gain matrices. However, if the same steady-state Kalman gain matrices are computed off-line 


TABFE XIII: Sensor fault detection times using multiple interacting HKF, EKF, EKF, UKF and 
CKF based FDI approaches without considering any health parameter degradation. 


MM-Based 

Fault Detection Time (FDT) (sec) 

FDI Approach 

T C 

Pc 

N 

T t 

P T 

HKF 

0.3 

0.4 

0.3 

0.3 

0.5 

LKF 

6.3 

35.8 

15.7 

11.6 

11.8 

EKF 

0.9 

0.9 

0.7 

0.8 

0.8 

UKF 

0.5 

0.5 

0.5 

0.6 

2.3 

CKF 

0.5 

0.5 

0.5 

0.5 

1.9 
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TABLE XIV: Computational time as measured in seconds for different filtering methods. 


MHKF 

MLKF 

EKF 

UKF 

CKF 

131.21 

526.81 

1184.2 

2856.4 

2673.44 


and stored for use in the MLKF approach, the average computational time associated with the 
healthy mode filters in the MLKF scheme is about 80 seconds, which is less than that of the 
MHKF method. Under this situation, the extra computational time required by the MHKF is 
associated with the OBEM operations. Therefore, the only disadvantage of the MHKF method 
is the amount of memory that is needed for storing the look-up tables that include the matrices 
A 1 , C and K\ s at different operating points. 

Finally, in the following experiment results, it is shown that the number of required operating 
points, and therefore the amount of required memory for the MHKF, is less than that of the 
MLKF-based FDI method. 

Experiment 6: In this experiment, the number of required operating points is investigated 
by measuring the mean of the combined residual signals in presence of the health parameter 
degradations for the MLKF and MHKF methods. To cover the entire flight profile, five operating 
points are generated for the MHKF method as described in TABLE II. Note that the MLKF 
method still needs more operating points since it is not capable of tracking rapid variations of 
the thrust during the climbing and landing modes, and therefore it generates false alarms due to 
the higher estimation error as compared to the MHKF scheme. TABLE XV compares the mean 
of the MHKF and MLKF combined residual signals that are associated with the healthy mode 
as a function of the number of operating points. Fig. 7 displays the mode probabilities that are 
generated for the MHKF and MLKF methods for different number of operating points. In this 
experiment, the engine has no sensor fault, but a 3% degradation is applied to the actual engine 
compressor health parameters. As stated in Section VI-A, the MHKF is robust with respect to the 
applied health degradations even without updating the OBEM model health parameters, although 
the MHKF needs to be updated for larger degradation levels. Based on the results obtained, it 
can be concluded that the mean of the combined residual signal associated with the healthy mode 
can be reduced by increasing the number of the operating points. It is expected that the MLKF 
estimation error decreases further by increasing the number of the operating points. However, 
we are not capable of perfectly avoiding generation of a false alarm by using the MLKF method 
corresponding to our particular flight profile by increasing the number of the operating points, 
since the MLKF cannot track high variations of the thrust in our application. Therefore, it may 
be feasible to apply the MLKF with the combined PWL models if the engine thrust increases 
with the slower speed than ours since the PWL model weights calculation is a time-consuming 
process which may diminish the ability of the MLKF to track the rapid variations of the thrust. 

Therefore, it can be concluded that the MM-based FDI scheme which utilizes our proposed 
MHKF approach is capable of promptly detecting and isolating various sensor bias faults during 
the entire flight profile by updating the OBEM health parameters reference baselines and even 
without updating the OBEM model for certain levels of health parameter degradations. Our 
scheme also estimates the engine state and output variables with more accuracy and smaller 
number of operating points as compared to that by the MLKF-based scheme. 
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(d) (e) (f) 


Fig. 7: Mode probabilities that are generated for the MM-based FDI method by utilizing (a-c) 
the MHKF and (d-f) the MLKF with one, three and five operating points. 


TABLE XV: Mean of the combined residual signals ( 7 J) associated with the healthy mode for 
both the MHKF and MLKF methods in terms of the number of the operating points, whereas 
3% degradation is applied to the compressor health parameters. 


Sensor 

1 operating point 

3 operating points 

5 operating points 

HKF 

LKF 

MHKF 

MLKF 

MHKF 

MLKF 

T c 

0.109 

0.2305 

0.077 

0.1091 

0.0119 

0.0857 

Pc 

0.2286 

0.943 

0.0771 

0.1523 

0.0216 

0.1315 

N 

0.0255 

0.0123 

0.0167 

0.0053 

0.0003 

0.0014 

T t 

0.0813 

0.3339 

0.0745 

0.2372 

0.0197 

0.1008 

Pt 

0.0152 

0.0477 

0.0116 

0.036 

0.0006 

0.0049 


VII. CONCLUSIONS 

In this paper, a novel approach for both single and concurrent sensor fault detection, isolation 
and identification/estimation (LDII) for gas turbine engines is proposed. Our methodology is 
based on the developed Hybrid Kalman Filter (HKF) as the detection filter of a hierarchical 
multiple-model based structure. Despite the use of linear Kalman filters, the HKL is capable 
of capturing the nonlinearities of the system by integrating a nonlinear on-board engine model 
(OBEM) with piecewise linear (PWL) models to cover the entire operating range of the engine. 
Compared to the multiple linear Kalman filter (MLKF), our proposed approach requires fewer 
number of operating points although each corresponds to a larger operating range. 

Another important contribution of this work is in the inclusion of the effects of health parameter 
degradations in our proposed sensor FDII scheme through updating the OBEM health parameters 
reference baselines that enables one to prevent false alarms and incorrect fault detections. 
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Therefore, unlike most of the previous work in the literature that have not considered the 
influence of health parameters variations on the performance of the developed FDII approaches, 
our proposed sensor FDII scheme is sufficiently more effective for use in the entire flight profile. 
It is furthermore suitable during the engine life cycle by updating the OBEM health parameters 
reference baselines, and by replacing the steady-state values with the OBEM states and outputs 
and integration of the designed PWL models. Moreover, our proposed MM-based sensor FDI 
scheme is integrated with the modified GLR method to estimate a sensor fault severity. Finally, 
it is demonstrated through extensive simulation studies that the accuracy and robustness of 
our proposed MHKF-based FDI approach against the engine health parameter degradations are 
significantly superior to that of those generated by other investigated methods such as the MLKF, 
EKF, UKF, and CKF. 


Appendix A 

In Section II, for sake of notational simplicity the same notations were used for both versions 
of the OBEM. However, here we use Anobem and Tnobem to designate the nominal OBEM 
(A = 1) that is equivalent to (2), and A'obem and Tobem to designate the OBEM with the 
updated health parameters (A ^ 1) that is equivalent to (5). 

Let the nominal continuous-time OBEM model (NOBEM) be represented by: 

ATnOBEM^) = /c(-ATNOBEM(f), -^NOBEM^), U(t)), 

^NOBEM(f) = 5 , c(^NOBEM(f)j-^NOBEM(f))- 


To construct the HKF, the nominal continuous-time OBEM is initially linearized at a certain 
operating point (X ss , U ss , Y ss ) without considering degradations as follows: 


-AnOBEM^. ) — fc(X ss , U ss ) + 

ANOBEM (t) = g c (X ss , U ss ) + 


dfc 

< 9 A^nobem 

dg c | 
<9ATnobem 


df 

s (-ATNOBEM(f) — X ss ) + -jXj 
(ATnobemW — x ss ) + Ag c , 


u m (U(t) — U ss ) + Af c , 


where f c (X ss , U ss ) = 0 and g c (X ss , U ss ) = Y ss . The health parameters are the state-dependent 
functions whose effects are incorporated in the above partial derivatives. The linear continuous¬ 
time model is now discretized by using a sufficiently small sampling period to yield the corre¬ 
sponding discrete-time linear model: 


-Anobem(& + 1) — x ss — A|x as (AAjobem(^) — X ss ) + B\u as {U{k) — U ss ) + A F, 
Anobem(^) = A^s + C|x ss (AT NO bem(^) — AT SS ) + AG, 


where A| Xss = exp(A c | A - ss T s ), B\ Uss = (f Q Ta exp(A c | Ass r)dr)5 c | c/ss , and C\ x „ = C c \ Xss are 

obtained in terms of the state-space matrices that are associated with the continuous-time linear 

cks = „ \x„, and the sampling 


model A, 


c X aa ~ 


„ _ ,y 

9X N qbem 1 Ass ’ 


B, 


el 14 


= kl tj.„ and C, 


dfc 

~ au\ u t 

X g, 


period is denoted by T s . Also, A f c , Ag c , AF and AG represent the higher order terms in 
the linearization process. To construct the HKF, it is necessary to update the OBEM health 
parameters. Therefore, the nominal model is only used once to derive the state-space matrices 
and the steady-state values. 

Assumption 1. The linearization of the nominal OBEM with A = 1 and the updated OBEM 
with A 7 ^ 1 generate approximately the same matrices and steady-state values. 
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Therefore, given that Assumption 1 holds, the linearized version of the updated OBEM can 
be derived as follows: 

-Xobem(& + 1) — A ss ftj A| y ss (A" 0 bem(^) — A ss ) + B\ Um (U(k) — U ss ) + A F, 

YoBEu(k) « y ss + G|x 8S (Aqbem(&) - A ss ) + AG. (24) 

Moreover, the relationship between the instantaneous values of A OB em(&) and Tobem(^) and 
the steady-state values associated with each linearized model can be given by: 

ATobem(^) = A ss + Xi(k ), 

^OBEM(fc) = Y BB + Y l (k), (25) 

where Xi(k) and Yi(k) represent the perturbations from the steady-state values as well as 
variations of the OBEM state variables and outputs due to updating the health parameters 
reference baselines. The linear Kalman filter can be designed as follows: 

X(k + 1) - A ss = A\ Xaa (X(k) - A ss ) + B\ Uss (U(k) - U ss ) + K ss (Y(k) - Y(k )), 

Y(k) = Y ss + C\ Xss (X(k) — Xss), 

which can be rewritten by using (25) as follows: 

X(k + 1) - Aobem(^) + X t (k) = A\ Xss (X(k) - Aqbem (k)) + K ss (Y(k ) - Y(k)) + A^Mk) 

+ B\ Uaa (U(k) — U ss ), 

Y(k) = YoBEuik) + C\ x jX(k) - Aqbem (k)) + C^Mk) ~ Y t (k). (26) 

Using (24), the last two terms in the R.H.S of (26) can be rewritten as follows: 

^4|x ss (Aobem(&) — A ss ) + B\u aa (U(k ) — U ss ) ~ A OB em(^ + 1) — A ss — A F, 

C\xjX 0 BEu(k) - X ss ) - Yi(k) « Tobem(^) - A ss - Y t (k) - AG = -AG. 

Therefore, the discrete-time form of the HKF can be obtained as follows: 

X(k + 1 ) - Aqbem+ 1) ~ A\ Xas (X(k) - Aqbem (k)) + K ss (Y(k) - Y(k)) - AF, 

Y{k ) ~ Tobem(^) + C|x ss (A (k) — A"obem(^)) — AG, 

which will lead to ( 6 ) for the particular operating point if the higher order terms A F and AG 
as well as the approximation error due to Assumption 1 are neglected. 
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